There is legitimacy if you assume the leaker is the only source of the information. In such cases it logically follows that trust in the contents of the leak is reliant on trust in the leaker, until other ways to authenticate the contents of the leak become available.

Once separately verified the discrediting game is utter nonsense though.